Entanglement-free certification of entangling gates 
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Not all quantum protocols require entanglement to outperform their classical alternatives. The 
nonclassical correlations that lead to this quantum advantage are conjectured to be captured by 
quantum discord. Here we demonstrate that discord can be explicitly used as a resource: certifying 
untrusted entangling gates without generating entanglement at any stage. We implement our 
protocol in the single-photon regime, and show its success in the presence of high levels of noise and 
imperfect gate operations. Our technique offers a practical method for benchmarking entangling 
gates in physical architectures in which only highly-mixed states are available. 



Models of intermediate quantum computing [P-^ of- 
fer an intriguing approach for developing quantum de- 
vices that outperform their classical counterparts. These 
models derive their attraction from the reduced resources 
compared to scalable quantum computing, and hence 
should be realisable sooner. One example of interme- 
diate quantum computation is the mixed-state algorithm 
DQCl [1 . Its computational advtange is often [5, 6 as- 
sociated with quantum discord [7l|8], a nonclassical corre- 
lation which is identical to entanglement for pure states, 
but persists for mixed states, even when the entangle- 
ment is zero. 

The presence of such nonclassical correlations in virtu- 
ally all mixed states prompted the question as to whether 
discord was ultimately a useful quantum resource [9]. 
While it is now known that quantum circuits consist- 
ing of one- and two-qubit gates cannot provide super- 
polynomial computational speedups without generating 
discord [TO], a formal link to computational advantage 
of specific protocols such as DQCl is still missing. This 
has motivated much effort in identifying the operational 
significance of discord, both in theory pTH2Q] and exper- 
iment [2TJ [22j. Most recently, it has been shown that 
discord can be consumed as a resource to encode infor- 
mation that only coherent interactions can extract |22|. 

Here we show that discord has a direct practical ap- 
plication. We use it to verify that an untrusted party 
can implement two-qubit entangling operations. This is 
often hard to achieve: since the generation of pure probe 
states — separable or entangled — is difficult in many phys- 
ical architectures, thus our technique significantly lowers 
the bar for verifying entangling operations. We test our 
technique using a two-qubit photonic entangling gate and 
show that we can verify entangling operation even in the 
presence of environmental noise or imperfect gates. 

In the discord consumption protocol introduced in [22], 
Alice randomly encodes information in some discordant 
bipartite state Pab^ and Bob is challenged to retrieve 



as much of this information as possible. If Bob is lim- 
ited to performing a single local measurement on each 
bipartition, then his performance is constrained to some 
incoherent limit. However, Bob can surpass this classical 
limit by harnessing discord present in the system through 
coherent bipartite interactions. The protocol suggested 
that discord could be used to test for Bob's capacity to 
coherently interact, and thus entangle the two physical 
systems. The continuous- variable implementation of [22], 
however, contained a loophole. The incoherent limit as- 
sumed that each bipartition was measured only once. 
Bob could thus potentially cheat and surpass this bound 
through multiple rounds of measurements with a degen- 
erate spectrum. 

The loophole can be closed if Alice's bipartite state 
consists of two discordant qubits. Here we show that 
the incoherent limit strictly bounds the amount of infor- 
mation Bob can access with only single-qubit quantum 
gates. Should Bob surpass this limit, Alice can be certain 
that Bob has an entangling two-qubit gate. 

Alice first prepares a two-qubit state pab in an equal 
mixture of the three symmetric Bell states, 

PAB = I + + \^^){^^\) , (1) 

where |^±) = (|00)±|11))/V2 and |V^±)=(|01)±|10))/V^. 
This state can be rewritten as pAB=^i{\^i^i){^i^i\ 
where i={x^ z}, so that |0)i and \ rep- 
resent the computational basis states with respect to the 
Pauli operators a^. Thus, pab can always be prepared 
by initialising two qubits oriented in one of the six or- 
thogonal directions on the Bloch sphere at random. The 
state pAB is thus clearly separable, but contains non-zero 
discord. 

Discord aims to capture solely the quantum com- 
ponent of the correlations between two physical sys- 
tems 111 E]. The total correlations between two 
systems, A and 5, are quantified by the mutual 
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information I{A^ B)=S{pa)+S{pb)—S{pab)' Mean- 
while the classical component of these correlations, 

J(A|5)=S'(pA)-max|n4GA4 EP6*5'(pa|6), is defined by 
the reduction in the entropy of A after a measurement 
on 5, when maximized over positive operator value mea- 
surements (POVMs) performed on B. (Here, is the 
probability of getting measurement outcome 6, leaving 
A in the conditional state pA\b^ aiid M. represents the 
class of all possible POVMs). Thus, the difference be- 
tween these quantities quantifies the amount of quantum 
correlations between A and B. We define this discrep- 
ancy, S{A\B)=I{A,B)-J{A\B), as the discord. For our 
protocol, we find S{A\B)=S{B\A) = l. 

To test Bob's capacity to implement entangling gates, 
Alice first generates a random variable K that is uni- 
formly distributed between the four possible values 
(61,62), where 61,62 ^ {0,1} are random bits. Fig. la). 
She encodes each possible k = (61,62) on her system 
by application of the corresponding local unitary Uk = 
cr^^cr^z^ on qubit A. The qubit pair is given to Bob, who 
is challenged to guess k by returning an estimate km gov- 
erned by a random variable K^. Bob's performance is 
then quantified by the amount of information km con- 
tains about /c, i.e., /exp = ^(K,K^), where /(K,K^) is 
the mutual information between K and K^. 

Let Ic be Bob's best possible performance when he is 
restricted to single-qubit gates and single qubit measure- 
ments. Let Iq be his performance when he can also imple- 
ment arbitrary two-qubit gates on A and B, or between 
either qubit and additional ancilla qubits: AI=Iq—Ic is 
then the 'quantum advantage' of having two-qubit entan- 
gling gates. Provided AI is non-zero, Alice can be cer- 
tain that Bob possesses some entangling two-qubit gate. 
In the appendix, we show that this is possible for any 
general two-qubit state pab that contains discord. Fur- 
thermore, provided A and B represent qubits. 



Ig-h = 5iA\B). 



(2) 



The amount of information Alice can encode within pab 
that can be accessed by two-qubit operations is given 
exactly by the amount of discord in pab- 

Bob's optimal strategy is to perform a Bell state mea- 
surement on the state he receives from Alice. For each 
/c, the resulting state after application of Uk will be an 
equal mixture of three of the four Bell states 
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where r=(— 1)^^ Por every instance of the protocol, 
Bob's Bell state measurement will thus allow him to elim- 
inate one of the four possible values of k. His prob- 
ability of correctly guessing k based on each outcome 
will be 1/3, which results in an information rate of 
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FIG. 1. a) Quantum circuit representation of the protocol. 
Alice prepares discordant state pAB and encodes onto it the 
classical quaternary variable k via the unitaries a^^ , crj^ . 
Bob conducts an allegedly entangling operation — optimally 
a Bell-state measurement — to estimate Alice's encoding, b) 
Experiment. Alice's qubits are realised using orthogonal po- 
larisation states of two 820 nm single photons generated via 
type-I spontaneous parametric down- conversion in a 2 mm /3- 
barium-borate (BBO) crystal pumped by a frequency-doubled 
Ti:Sapphire laser (820 nm 410 nm, 100 fs at 76 MHz). 
Her single-qubits are initialised with polarising beamsplitters 
(PBS), and rotated (lilac area) and encoded (green area) via 
quarter- (QWP) and half- wave plates (HWP). Bob's entan- 
gling measurement is realised with a non-deterministic cz gate 
based on nonclassical interference of photons at a partially- 
polarising beam splitter (PPBS) of reflectivity r]v = 2/3 
(^r]H — 0) for vertical (horizontal) polarisation. Photon ar- 
rival time is controlled by a relative temporal delay Ar=0, 
which is used to tune gate quality. The three HWPs enact 
Hadamard operations to turn the CZ into a CNOT gate, and 
to complete the Bell-state measurement (yellow area). Pho- 
tons are analysed in detected in the Z-basis by PBS's, and 
detected by avalanche photodiodes (APD, grey area). 



Iq=2— log2(3) ~ 0.415, assuming zero noise and a perfect 
gate operation. 

In contrast, Bob's maximal information rate without 
an entangling two-qubit gate is bounded above by Ic = 
Iq-5{A\B)=5/3-\og2{3)^0m2 for our particular pab- 
Upon receipt of kjj 

information rate Iq^^. Should this exceed 



Alice can compute Bob's achieved 
she is sure 

that Bob is capable of implementing an entangling two- 
qubit operation. 

In our experiment, Alice encodes pab in the po- 
larisation of two single photon qubits, where horizon- 
tal \H) and vertical \V) polarisations correspond to 
the logical states |0) and |1), Fig. Bob conducts 

his Bell-state measurements using a non-deterministic, 
controlled-phase (cz) gate [23l [24] and single-qubit 
Hadamard gates. The CZ gate relies on two-photon inter- 
ference at a beamsplitter, imparting a tt phase shift on 
the input state Ucz\VV) —\VV), while leaving other 
input combinations of these basis states unchanged. 

Alice constructs her discordant state pab se- 
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quentially by preparing photons in one of the 
states {\HH),\VV),\DD),\AA),\RR),\LL)], where 
\D),\A)={\H)±\V))/^ and \R) ,\L)={\H)±i\V)) / ^, 
and applies one of the four encodings k. Bob's Bell 
state measurement sums up over all components of 
Alice's state to extract the final measurement out- 
comes. The experimental information rate achieved 
was /^^P=0.363±0.008 which is more than 35 standard 
deviations above the classical limit for /c- 

We investigated the robustness of the protocol by 
studying two key sources of imperfection: i) the addition 
of white noise to the ideal state, Pab=P p) 
and ii) imperfect gate operation, by increasing the tem- 
poral distinguishability between the two interfering pho- 
tons. At. We modelled the latter by mixing one of the in- 
put photon modes of the gate with a vacuum mode using 
a virtual beamsplitter with variable transmission ^ [23]: 
the relation of this parameter to the temporal mismatch 
At is found by mapping to the well-known Gaussian two- 
photon interference pattern, ^=1— e"^^^^'^) , where Auj 
is the spectral bandwidth of our single photons. Starting 
from Bob's optimal information rate IqC:^0A15^ Fig. |2j^a) 
predicts a large operating range with quantum advan- 
tage. 

We tested this prediction experimentally. In Fig. [2|b) 
Bob runs the entangling gate optimally, Ar=0, and Alice 
increases the noise on her state until pab is fully mixed. 
As predicted, we find that Bob always retains a quantum 
advantage over the classical estimate for a given level of 
noise. 

In Fig. ^c) Alice prepares the optimal state pAs and 
Bob decreases gate performance by temporal mode mis- 
match. The amount of information that can be extracted 
without two-qubit gates, /c, in this scenario is indepen- 
dent of the gate operation and thus constant. Again, as 
predicted. Bob can demonstrate a quantum advantage up 
to ~ 0.1 coherence lengths: Bob can still convince Alice 
he is capable of performing an entangling operation even 
when his gate doesn't perform very well. Conversely, if 
Alice knows the quality of the states she sent, she will 
be able to quantify the performance of Bob's entangling 
gate based on his guess. 

Our technique could be particularly useful for char- 
acterising physical architectures that are intrinsically 
entangling — such as spins in a solid interacting via J- 
coupling — but where initialising the qubits to a pure 
state is difficult. Our experiment demonstrates that in 
such architectures mixed-states containing discord above 
the classical bound Ic suffice to certify entangling opera- 
tion. 
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FIG. 2. Certification of a quantum operation with discordant 
states, (a) Theoretical performance Iq achievable by Bob with 
arbitrary two-qubit gates as a function of noise in Alice's re- 
source states, 1— p, and of the quality of Bob's gate opera- 
tion, Ar/rcoh- (b) Experimental results. Using a (cz) gate, 
Bob will always do better than someone with only single- 
qubit gates when Alice sends noisy discordant input states 

pAB = PpAB + (1 — p)\- The shaded regions represent the 
theoretical quantum advantage. Error bars are smaller than 
symbol size, (c) Bob retains this advantage when using a 
less-than-ideal (cz) gate, experimentally realized via tempo- 
ral mode mismatch Ar / TcoH between the interacting photonic 
qubits, up to Ar/rcoh = 0.1. Errors are based on Poissonian 
counting statistics. 
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Appendix A: Proof of main result 

In this section, we prove that for an arbitrary two-qubit 
state pAB with discord 5{A\B)^ and the aforementioned 
encoding, Bob's advantage using entangling gates is 

I,-h = 6{A\B), (4) 

where Iq is Bob's optimal performance with arbitrary 
quantum processing, and Ic is is optimal performance 
when entangling two-qubit gates are unavailable. To do 
this, we introduce an additional scenario. Let be Bob's 
optimal performance when he has no entangling gates, 
and furthermore, is restricted to a single measurement 
on each qubit. Clearly this addition restriction implies 
that < Ic We will prove that additionally, Ic < I'c^ 
and thus Ic = I'c- 

This is done by contradiction. Assume that Ic > I'c^ 
i.e.. Bob can exceed a performance of without use of 
entangling gates by making multiple measurements on 
either qubit A or qubit B. Let this be qubit A without 
loss of generality. 

Since A resides in a 2-dimensional Hilbert space, sub- 
sequent measurements on A are advantageous only if the 
first was weak, i.e., involving the interaction of A with an 
ancilla C, followed by a measurement of C. This inter- 
action, however, must have the potential to entangle A 
and C and thus constitutes an entangling gate. This con- 
tradicts out assumption that Bob did not use entangling 
gates. Therefore Ic = I'c 

In [22 , is referred to as the incoherent limits and it 
was established that 

I, - K=A{A\B) (5) 

provided Alice's choice of encoding is maximal 
{^kPkUkpU^ = 1/2 is totally mixed for any single qubit 
state p). This condition is satisfied for the encoding in 
our protocol, thus, the relation also applies to Ic. Thus 
Ig-Ic = SiA\B). 

Appendix B: Explicit Evaluation of Ic 

Here we explicitly show that for the specific protocol 
where pab is a mixture of three Bell states, Bob's optimal 
performance without two-qubit gates is /c = | — log2 (3) . 
First, note that Bob can saturate Ic by making a sin- 
gle measurement on each of two qubits he receives 
from Alice. If the measurement results are identical, he 
guesses k = (0, ?), otherwise he guesses k = (1, ?), where 



? denotes a random guess. This strategy gives no infor- 
mation about the second bit, but can guess the first bit 
correctly 2/3 of the time. The resulting information rate 
is 1 — = /c, where II{.) denotes the binary entropy. 

This strategy is in fact optimal. We note from Ap- 
pendix A that Bob's optimal strategy need only involve 
a single measurement on each qubit. Consider first a 
measurement on system B described by operators {H^}. 
Since the encoding Uk is localized to A, it commutes with 
the measurement operation. Therefore, if Bob were to 
get measurement outcome 6, Alice would have effectively 
encoded onto the conditional state pA\b- Bob's result- 
ing information rate is thus constrained by the Holevo 
bound, 1 — ^^ijPbSipAib)^ which is maximized when Bob 
chooses a measurement that minimizes the expected en- 
tropy of the resulting state. Due to the symmetry of Pab, 
any projective measurement does this. Without loss of 
generality, measurement in the Z basis gives 

S{PAlb)=crl(^l\0){0\ + l\l){l\yi (6) 

This results in a Holevo bound ofl — = | — log2 (3) . 

To bound the case where Bob decides to measure qubit 
A, we note that Bell states satisfy the property (a^^cr^^ ^ 

I)pAB{cr^a:'^z'^I) = i^^^x' ^l') PAb{I^(T^^' (T^^) • That is, 

although Alice encoded onto qubit A, the resulting state 
is functionally equivalent to encoding on qubit B. Thus, 
by inverting A and 5, the previous argument applies. 

The optimal performance Bob can achieve without en- 
tangling two-qubit gates is therefore /c = | — log2(3). 
Since 6{A\B) = 1/3, this agrees with our general result 
that Iq - Ic=S{A\B). 
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